CVE-2021-42126CWE-285

An improper authorization control vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform…

published December 7, 2021

CVSS
—
EPSS
4%
Percentile
90.5
In the wild
Unconfirmed
What it is

An improper authorization control vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform privilege escalation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03999 · 90.5th percentile
Weakness
CWE-285 · Improper Authorization
Published
2021-12-07T13:12Z
EPSS history
Timeline
  • 07 DEC 13:12Z
    An improper authorization control vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform…
    cvelistv5